adversary-emulation

Automated Adversary Emulation Platform

Infection Monkey - An open-source adversary emulation platform

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Open Adversarial Exposure Validation Platform

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.

Utilities for MITRE™ ATT&CK

Tool for building Kubernetes attack paths

BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

Open-source adversary emulation for AI agents and MCP servers.

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.

indirect syscalls for AV/EDR evasion in Go assembly

Go shellcode loader that combines multiple evasion techniques

MITRE Caldera™ for OT Plugins & Capabilities

Repo containing cracked red teaming tools.

GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.

Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.